URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 103.20.103.50
Firstseen:2025-09-01 11:21:04 UTC
Total malware sites :28
Online malware sites :0 (0%)
Offline Malware sites :28 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-09-01 11:21:10 103.20.103.50Not listedAS150895 EZTECH-VN- VNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-09-08 17:27:15http://103.20.103.50/mipsOfflineelf ua-wget ClearlyNotB
2025-09-08 17:27:15http://103.20.103.50/m68kOfflineelf ua-wget ClearlyNotB
2025-09-08 17:27:15http://103.20.103.50/arm5Offlineelf ua-wget ClearlyNotB
2025-09-08 17:27:15http://103.20.103.50/ppcOfflineelf ua-wget ClearlyNotB
2025-09-08 17:27:15http://103.20.103.50/arm6Offlineelf ua-wget ClearlyNotB
2025-09-08 17:27:15http://103.20.103.50/x86Offlineelf ua-wget ClearlyNotB
2025-09-08 17:27:15http://103.20.103.50/x86_64Offlineelf ua-wget ClearlyNotB
2025-09-08 17:27:15http://103.20.103.50/armOfflineelf ua-wget ClearlyNotB
2025-09-08 17:27:15http://103.20.103.50/spcOfflineelf ua-wget ClearlyNotB
2025-09-08 17:27:15http://103.20.103.50/debug.dbgOfflineelf ua-wget ClearlyNotB
2025-09-08 17:27:15http://103.20.103.50/mpslOfflineelf ua-wget ClearlyNotB
2025-09-08 17:27:15http://103.20.103.50/sh4Offlineelf ua-wget ClearlyNotB
2025-09-02 14:52:29http://103.20.103.50/hiddenbin/boatnet.i468Offlineelf ua-wget abuse_ch
2025-09-02 14:52:29http://103.20.103.50/hiddenbin/boatnet.i686Offlineelf ua-wget abuse_ch
2025-09-02 14:52:29http://103.20.103.50/hiddenbin/boatnet.x86_64Offlineelf ua-wget abuse_ch
2025-09-02 05:22:12http://103.20.103.50/hiddenbin/boatnet.sh4Offlineelf geofenced mirai ext opendir ua-wget USA botnetkiller
2025-09-02 05:22:11http://103.20.103.50/hiddenbin/boatnet.arcOfflineelf geofenced mirai ext opendir ua-wget USA botnetkiller
2025-09-02 05:22:08http://103.20.103.50/ohshit.shOfflinegeofenced mirai ext sh ua-wget USA botnetkiller
2025-09-02 05:22:08http://103.20.103.50/hiddenbin/boatnet.arm7Offlineelf geofenced mirai ext opendir ua-wget USA botnetkiller
2025-09-01 22:33:18http://103.20.103.50/hiddenbin/boatnet.m68kOfflineelf mirai ext ua-wget ClearlyNotB
2025-09-01 22:32:19http://103.20.103.50/hiddenbin/boatnet.spcOfflineelf mirai ext ua-wget ClearlyNotB
2025-09-01 11:22:19http://103.20.103.50/hiddenbin/boatnet.mpslOfflineelf mirai ext ua-wget ClearlyNotB
2025-09-01 11:21:17http://103.20.103.50/hiddenbin/boatnet.arm6Offlineelf mirai ext ua-wget ClearlyNotB
2025-09-01 11:21:10http://103.20.103.50/hiddenbin/boatnet.armOfflineelf mirai ext ua-wget ClearlyNotB
2025-09-01 11:21:10http://103.20.103.50/hiddenbin/boatnet.arm5Offlineelf mirai ext ua-wget ClearlyNotB
2025-09-01 11:21:10http://103.20.103.50/hiddenbin/boatnet.mipsOfflineelf mirai ext ua-wget ClearlyNotB
2025-09-01 11:21:10http://103.20.103.50/hiddenbin/boatnet.ppcOfflineelf mirai ext ua-wget ClearlyNotB
2025-09-01 11:21:10http://103.20.103.50/hiddenbin/boatnet.x86Offlineelf mirai ext ua-wget ClearlyNotB